Insecure Permissions in GL.iNet AX1800 Product by GL.iNet
CVE-2023-47463

9.8CRITICAL

Key Information:

Vendor

Gl-inet

Status
Gl-ax1800 Firmware
Vendor
CVE Published:
30 November 2023

What is CVE-2023-47463?

An Insecure Permissions vulnerability exists in GL.iNet AX1800 version 4.0.0 and earlier, which allows a remote attacker to execute arbitrary code. By exploiting this vulnerability, attackers can send malicious scripts targeting the gl_nas_sys authentication function, potentially compromising the device. Users are urged to update to version 4.5.0 or later to mitigate the risk.

References

https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/an%...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.